Lucene search

K
MeowappsAi Engine

10 matches found

CVE
CVE
added 2024/12/12 6:15 a.m.84 views

CVE-2024-10499

The AI Engine WordPress plugin before 2.6.5 does not sanitize and escape a parameter from one of its RESP API endpoint before using it in a SQL statement, allowing admins to perform SQL injection attacks

7.2CVSS7.2AI score0.00185EPSS
CVE
CVE
added 2024/04/12 2:15 p.m.77 views

CVE-2023-51409

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 1.9.98.

10CVSS9.3AI score0.92462EPSS
CVE
CVE
added 2024/03/28 6:15 a.m.74 views

CVE-2024-29100

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4.

9.1CVSS9.3AI score0.00089EPSS
CVE
CVE
added 2024/03/28 6:15 a.m.46 views

CVE-2024-29090

Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4.

6.8CVSS6.7AI score0.0026EPSS
CVE
CVE
added 2024/02/05 10:16 p.m.41 views

CVE-2024-0699

The AI Engine: Chatbots, Generators, Assistants, GPT 4 and more! plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'add_image_from_url' function in all versions up to, and including, 2.1.4. This makes it possible for authenticated attackers, wit...

7.2CVSS7.8AI score0.07121EPSS
CVE
CVE
added 2024/05/14 3:39 p.m.39 views

CVE-2024-34440

Unrestricted Upload of File with Dangerous Type vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.2.63.

9.1CVSS6.8AI score0.00543EPSS
CVE
CVE
added 2024/08/01 9:15 p.m.38 views

CVE-2024-38791

Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot allows Server Side Request Forgery.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.4.7.

7.1CVSS6.2AI score0.00133EPSS
CVE
CVE
added 2023/06/27 2:15 p.m.36 views

CVE-2023-2580

The AI Engine WordPress plugin before 1.6.83 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite setup).

4.8CVSS4.7AI score0.00077EPSS
CVE
CVE
added 2024/09/13 6:15 a.m.36 views

CVE-2024-6723

The AI Engine WordPress plugin before 2.4.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by admin users when viewing chatbot discussions.

4.7CVSS5.1AI score0.00156EPSS
CVE
CVE
added 2024/08/19 6:15 a.m.35 views

CVE-2024-6451

AI Engine

7.2CVSS6.4AI score0.01642EPSS